Senior Software Systems Engineer (Security)

• The Product Security team is responsible for conducting structured security analyses of Zoox products and applying security standards judiciously throughout the System Development Life Cycle at Zoox
• The ideal candidate for this team will have a robust background in systems engineering, coupled with a demonstrated passion and expertise in cybersecurity
• Perform Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions
• Drive verification of quantified risks by fuzzing real world scenarios in simulator environments
• Write design proposals and drive execution while proactively communicating risks to partner teams
• Proactively identify opportunities to roll up risk metrics into various company wide frameworks
• Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints and factor that understanding into the analysis and recommendations

Benefits

• Paid parental leave
• Affinity groups and sports clubs
• Work from home opportunities
• Health insurance
• Our crew’s health and happiness is our first priority. We offer comprehensive health and mental health support, a wellbeing program, and unlimited and flexible paid time away
• We invest in our crew—and their families—for the long term. That includes generous family planning support, caregiver support, and strong cash compensation with great equity upside
• We look after our crew when they’re in the office too. Our famous food program is a great example, featuring a daily changing menu of local and sustainable dishes
• There’s a busy calendar of social events at Zoox, with more sports teams than you can count. And, of course, playing with robots is an important part of the job description

• Pragmatic adoption of AI/LLM toolchains for security analysis and authoring high quality regulatory work products
• Prior experience with quantitative risk assessment frameworks (eg: EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks)
• Master’s degree in CS or related engineering field (software, hardware, systems) and 7+ years of experience
• A strong general systems engineering background along with a demonstrated passion and concrete expertise in cybersecurity
• Prior experience with the risk analysis of complex embedded systems and a demonstrated skill in turning the analysis into high-quality written deliverables
• Experience with autonomous vehicle software stack (e.g., Perception, Prediction, Planning)
• Experience implementing large-scale evaluation pipelines
• Familiarity with common cloud deployment architecture and frameworks